> ## Documentation Index
> Fetch the complete documentation index at: https://docs.reddy.io/llms.txt
> Use this file to discover all available pages before exploring further.

# WorkOS Admin Tool

> Manage SSO connections through Reddy's WorkOS Admin Portal

## Overview

The WorkOS Admin Tool is integrated directly into Reddy's platform, providing a centralized interface for managing your organization's SSO connections and configurations. For comprehensive documentation, refer to the [WorkOS Admin Portal docs](https://workos.com/docs/admin-portal).

<CardGroup cols={2}>
  <Card title="Centralized Management" icon="cog">
    Manage all SSO connections from one interface
  </Card>

  <Card title="Real-time Monitoring" icon="chart-line">
    View session logs and authentication metrics
  </Card>

  <Card title="Quick Configuration" icon="wrench">
    Edit IdP settings and domain restrictions
  </Card>

  <Card title="Troubleshooting Tools" icon="bug">
    Access detailed logs for issue resolution
  </Card>
</CardGroup>

## Accessing the Admin Tool via Reddy

<Steps>
  <Step title="Navigate to Settings">
    Go to **Settings** → **SSO Admin Portal** in your Reddy platform.
  </Step>

  <Step title="Open Admin Portal">
    Click the **"Open Portal"** button to securely launch the WorkOS Admin Portal.

    <Note>
      The portal opens in a new tab and maintains your Reddy session for seamless access.
    </Note>
  </Step>
</Steps>

## Admin Portal Features

### Connection Management

The Admin Portal provides comprehensive tools for managing your SSO connections:

* **View Existing Connections**: See all configured identity providers
* **Add New Connections**: Set up additional IdP integrations
* **Edit Configurations**: Modify SAML/OIDC settings for existing connections
* **Test Connections**: Validate SSO functionality before deployment

### Domain Management

Control which email domains can authenticate through SSO:

* **Verify Domains**: Add new email domains for automatic user verification
* **Restrict Access**: Remove or modify domain permissions
* **Domain Status**: View verification status for all configured domains

### Attribute Mapping

Configure how user information flows from your identity provider to Reddy:

* **Email Mapping**: Ensure proper email address handling
* **Name Attributes**: Map first name, last name, and display name fields
* **Custom Attributes**: Configure additional user data if needed
* **Group Mapping**: Set up group-based access controls

### Session Monitoring

Monitor SSO authentication activity and troubleshoot issues:

* **Session Logs**: View detailed authentication attempts and results
* **User Activity**: Track individual user login patterns
* **Error Analysis**: Identify and diagnose authentication failures
* **Performance Metrics**: Monitor SSO response times and success rates

## Troubleshooting with the Admin Portal

### Session Logs

Each session record includes comprehensive information:

* **Request/Response Details**: Full SAML/OIDC message content
* **Timestamps**: Precise timing of authentication events
* **User Identity Attributes**: Complete user data from your IdP
* **Error Messages**: Detailed failure reasons and suggested fixes

### Common Troubleshooting Scenarios

<AccordionGroup>
  <Accordion title="Authentication Failures">
    **Using Session Logs**:

    1. Navigate to the Session Logs section
    2. Filter by failed authentication attempts
    3. Review error messages and user attributes
    4. Check for misconfigurations in attribute mapping

    **Common Issues**:

    * Missing required user attributes
    * Incorrect email domain configuration
    * Certificate validation errors
    * Time synchronization problems
  </Accordion>

  <Accordion title="User Access Problems">
    **Diagnostic Steps**:

    1. Check user's email domain in the Domain Management section
    2. Verify user assignments in your identity provider
    3. Review attribute mapping for completeness
    4. Test with a known working user account

    **Resolution**:

    * Add missing domains to the verified list
    * Update attribute mapping configuration
    * Verify user assignments in your IdP
  </Accordion>

  <Accordion title="Configuration Changes">
    **Making Updates**:

    1. Use the Connection Management tools to edit settings
    2. Test changes in a staging environment first
    3. Monitor session logs after deployment
    4. Coordinate with your team for user communication

    **Best Practices**:

    * Document all configuration changes
    * Test with multiple user accounts
    * Monitor for 24-48 hours after changes
    * Have rollback procedures ready
  </Accordion>
</AccordionGroup>